Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/qmd0ubcwFBc12S8cpatbdwwiPlk.roa
File: qmd0ubcwFBc12S8cpatbdwwiPlk.roa (raw, json)
Hash identifier: qvRpR4394XKeMLcJETypPTaduXdZHfTTekVXcGAzCtE=
Subject key identifier: AA:67:74:B9:B7:30:14:17:35:D9:2F:1C:A5:AB:5B:77:0C:22:3E:59
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 15FE6A
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/qmd0ubcwFBc12S8cpatbdwwiPlk.roa
Signing time: Sat 01 Jan 2022 02:57:01 +0000
ROA not before: Sat 01 Jan 2022 02:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.208.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441386 (0x15fe6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jan 1 02:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa6774b9b730141735d92f1ca5ab5b770c223e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:41:85:01:09:6b:38:9c:e4:e7:a1:3a:5b:
d3:08:5a:4e:b6:71:4b:98:8d:f7:39:f4:7c:a6:80:
96:3c:61:36:a5:34:56:44:7c:2d:88:71:9a:de:0d:
33:31:d2:8d:a8:72:db:f5:20:82:c7:04:39:c8:2f:
f3:65:f1:95:88:d0:a1:a1:6e:fd:d6:4d:01:a7:83:
f5:08:f6:2d:de:8b:5e:72:ac:cc:48:a7:8e:14:91:
b2:24:11:67:56:31:9a:0b:5e:08:81:13:35:dd:e2:
ee:7d:0b:c8:04:8f:80:c1:b9:34:78:2b:15:2d:fe:
44:ee:1b:90:b1:d5:fb:62:ba:36:f6:93:dd:e3:46:
59:76:fb:e3:15:e2:a0:6b:ea:64:1b:9c:c1:bc:27:
b0:9e:a0:fc:80:b3:6b:7a:67:65:f0:c8:d7:5e:a3:
2f:19:ea:31:67:6a:db:e9:38:fa:a8:9b:38:51:cf:
fb:9a:33:95:a8:05:b8:e1:41:92:25:2e:f2:eb:7f:
26:80:3a:95:9b:ab:48:51:55:09:0d:c2:67:32:d5:
78:ea:83:a1:cf:5e:5f:63:e4:51:fc:64:9c:9b:16:
29:ac:12:8a:0e:3b:00:cc:99:1a:68:9d:24:5b:9e:
bf:5c:ba:fe:59:63:a2:8f:9a:77:60:f7:66:6d:0e:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:67:74:B9:B7:30:14:17:35:D9:2F:1C:A5:AB:5B:77:0C:22:3E:59
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/qmd0ubcwFBc12S8cpatbdwwiPlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e6:52:0c:c9:39:81:91:5c:2d:84:66:b1:25:76:ce:48:25:
7e:2e:48:0d:63:80:e5:89:39:e3:0e:e2:36:58:16:91:f3:52:
07:c2:80:a7:ba:ed:81:26:03:ea:7d:71:fa:e5:18:d1:7d:bc:
a7:27:6e:62:a0:68:80:ab:4a:34:b4:0a:05:51:12:e9:6d:39:
ff:ac:ff:6c:9c:11:33:4d:19:1d:50:1d:b1:25:ef:48:e0:77:
1c:88:cf:bc:f2:a1:49:63:64:34:1d:8f:95:98:e7:52:c0:ac:
0c:16:e9:0a:10:54:2f:ba:77:f1:70:06:b0:78:5f:03:29:4d:
46:79:20:73:37:3a:1e:dd:ed:4f:95:61:eb:26:50:bf:94:0a:
7e:c1:4e:5b:df:85:16:bd:52:2e:ff:d6:79:49:3f:72:55:9b:
59:c0:76:2a:bc:bc:0e:5e:9b:0f:41:3d:e6:20:1b:3f:83:3b:
5c:a4:48:34:71:03:06:ca:71:b7:99:9d:e5:ee:a2:7e:c0:9c:
3d:42:9f:fc:62:4d:8a:35:29:97:56:d6:fb:8a:95:bd:57:68:
8c:d0:f3:ed:fb:f5:61:f0:16:59:6f:dc:00:c0:c7:6e:30:31:
48:88:b4:3f:13:2d:dd:f7:39:61:c3:a0:ea:33:fa:65:42:03:
85:72:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:47 2024 by rpki-client on console-fra.rpki-client.org